ShinyHunters obtained the private keys to Clop's Tor onion service

Assessment

This is the most consequential of ShinyHunters' claims: possession of Clop's onion service private keys would let the group stand up a site at Clop's exact existing onion address on its own infrastructure, as ShinyHunters itself argued ('if they kick us out it wouldn't matter at all because we control the private keys to host the same exact onion URL'). BleepingComputer independently confirmed the defacement of Clop's leak site and the initial uploaded taunt file, but states explicitly that it has not independently verified ShinyHunters' claims to have stolen server logs, source code, or the onion private keys. A reader repeating 'ShinyHunters has Clop's onion keys' as fact would be treating an unverified assertion by an extortion actor — one with a direct incentive to overstate what it holds — as established.